TODO

7 credited records · 4 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Credited records

Researchers

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2026-5656No exploit	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wiresharkwireshark · wireshark · CWE-22 Path traversal	High7.8	—	0.1%	Apr 30, 2026
22Monitor	CVE-2026-5404No exploit	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wiresharkwireshark · wireshark · CWE-120 Memory safety Denial of service	Medium5.5	—	0.1%	Apr 30, 2026
22Monitor	CVE-2026-6870No exploit	Access of Uninitialized Pointer in Wiresharkwireshark · wireshark · CWE-824 Memory safety Denial of service	Medium5.5	—	0.1%	Apr 30, 2026
22Monitor	CVE-2026-6867No exploit	Improperly Controlled Sequential Memory Allocation in Wiresharkwireshark · wireshark · CWE-1325 Denial of service	Medium5.5	—	0.1%	Apr 30, 2026
31Monitor	CVE-2022-3724No exploit	Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file onwireshark · wireshark · CWE-134 Pre-auth Denial of service	High7.5	—	2.5%	Dec 9, 2022
31Monitor	CVE-2022-0581No exploit	Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or craftedwireshark · wireshark · CWE-416 Pre-auth Memory safety Denial of service	High7.5	—	1.7%	Feb 14, 2022
31Monitor	CVE-2021-39920No exploit	NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture wireshark · wireshark · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	3.2%	Nov 18, 2021

CVE-2026-5656
31Monitor
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark
HighCVSS 7.8No exploitEPSS 0%
- Path traversal
wireshark · wiresharkApr 30, 2026
CVE-2026-5404
22Monitor
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark
MediumCVSS 5.5No exploitEPSS 0%
- Memory safety
- Denial of service
wireshark · wiresharkApr 30, 2026
CVE-2026-6870
22Monitor
Access of Uninitialized Pointer in Wireshark
MediumCVSS 5.5No exploitEPSS 0%
- Memory safety
- Denial of service
wireshark · wiresharkApr 30, 2026
CVE-2026-6867
22Monitor
Improperly Controlled Sequential Memory Allocation in Wireshark
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
wireshark · wiresharkApr 30, 2026
CVE-2022-3724
31Monitor
Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Denial of service
wireshark · wiresharkDec 9, 2022
CVE-2022-0581
31Monitor
Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted
HighCVSS 7.5No exploitEPSS 1%
wireshark · wiresharkFeb 14, 2022
CVE-2021-39920
31Monitor
NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture
HighCVSS 7.5No exploitEPSS 3%
wireshark · wiresharkNov 18, 2021